This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lh7egGQMn0hPdd05wT7Wxw4HSgM.cer File: Lh7egGQMn0hPdd05wT7Wxw4HSgM.cer (raw, json) Hash identifier: mJuNOYA+UXg5OnrEbt2oaMSTiWjJnnNIMy3D4uqHMcw= Subject key identifier: 2E:1E:DE:80:64:0C:9F:48:4F:75:DD:39:C1:3E:D6:C7:0E:07:4A:03 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB2F6A94238429F6C347CC7DA7259E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/0/2E1EDE80640C9F484F75DD39C13ED6C70E074A03.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215755 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:2f:6a:94:23:84:29:f6:c3:47:cc:7d:a7:25:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e1ede80640c9f484f75dd39c13ed6c70e074a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b0:55:55:15:5e:f8:62:76:b9:a3:f6:e1:95: 40:c1:a6:aa:38:7c:50:35:d2:ad:85:0d:eb:3c:99: 7f:83:ac:f4:67:60:a4:5c:25:5d:c3:a8:18:6d:8a: 60:19:0e:93:f9:73:8d:31:1a:18:42:9c:f2:a0:d7: 37:8f:a2:d6:e2:bd:1b:c0:b0:e5:fe:56:5e:24:36: 01:80:dc:af:e4:ae:87:c3:d1:6b:90:eb:4d:8b:f7: 25:c4:ed:04:38:bd:0f:34:a7:18:fe:d4:68:b7:9c: 68:ff:c1:5b:75:b4:e6:31:96:a8:eb:5f:52:e4:b7: 1d:c8:bc:ed:8f:d3:07:2b:51:09:4e:b3:25:e3:5c: aa:3c:a9:d0:c7:b3:11:d3:07:bd:eb:7f:05:fa:b4: 26:8b:77:9e:83:5b:56:bc:64:ed:b8:2c:26:65:fc: c0:a2:29:56:f5:c8:12:af:f1:a2:5c:98:ad:b5:5d: c4:a1:a7:cc:8d:66:a3:8e:dc:cb:10:cc:3e:bc:b3: ea:3f:a5:0c:69:62:c5:8a:93:2f:1c:46:97:cc:6f: fb:77:f8:2e:37:36:1b:0c:d9:ca:bd:f5:ae:40:21: 86:70:d5:f8:d5:08:4f:0a:0d:d4:89:20:5b:20:48: 3f:46:0c:08:e6:79:48:3d:0c:88:bf:49:23:d4:85: 35:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1E:DE:80:64:0C:9F:48:4F:75:DD:39:C1:3E:D6:C7:0E:07:4A:03 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/0/2E1EDE80640C9F484F75DD39C13ED6C70E074A03.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215755 Signature Algorithm: sha256WithRSAEncryption 9f:7b:ac:de:9a:06:76:46:b7:b6:e8:b2:7d:84:85:5e:5f:61: ba:1d:e0:e3:cd:00:00:e7:60:07:38:dc:e1:cf:4f:f8:1b:46: bb:c6:a7:10:0d:1e:79:39:de:49:d4:94:31:39:bd:a1:ce:22: 72:24:6a:35:48:aa:52:6e:d1:bb:f7:70:20:e3:4d:b3:7a:2f: 23:16:ea:e5:71:5c:d0:79:97:e0:d6:9e:d6:38:0b:ce:ff:d1: 72:c8:7f:b3:ea:e7:ef:8c:cd:a8:5f:e1:29:ab:0e:bd:2d:fe: 5e:d7:56:9e:0a:77:ca:8c:cc:5d:59:ab:ab:80:d2:fa:79:57: 4d:af:48:ae:1f:dc:53:ff:fb:36:23:98:bf:13:5a:50:31:8f: e9:c3:fb:92:13:43:1c:2b:b2:7f:a8:22:1a:06:e5:02:34:fb: 3b:5d:2b:44:cf:1c:75:1c:80:bf:02:9a:39:8d:02:6f:65:39: 43:cf:dd:dc:70:66:f7:1d:25:dd:1e:6e:40:21:fb:6c:90:4b: 9f:7e:9e:f2:9f:91:72:cb:62:4f:26:5d:38:99:c1:77:08:60: 01:24:a3:9f:5e:24:74:2f:c5:54:6c:e1:85:3c:18:27:97:cc: 8f:5f:96:8c:52:5c:fd:2f:c0:05:5f:05:ae:3e:85:4b:62:8d: b9:72:74:89 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt26y9qlCOEKfbDR8x9pyWeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTFlZGU4MDY0MGM5ZjQ4NGY3NWRkMzljMTNlZDZjNzBlMDc0YTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLBVVRVe+GJ2uaP24ZVAwaaqOHxQ NdKthQ3rPJl/g6z0Z2CkXCVdw6gYbYpgGQ6T+XONMRoYQpzyoNc3j6LW4r0bwLDl /lZeJDYBgNyv5K6Hw9FrkOtNi/clxO0EOL0PNKcY/tRot5xo/8FbdbTmMZao619S 5LcdyLztj9MHK1EJTrMl41yqPKnQx7MR0we9638F+rQmi3eeg1tWvGTtuCwmZfzA oilW9cgSr/GiXJittV3EoafMjWajjtzLEMw+vLPqP6UMaWLFipMvHEaXzG/7d/gu NzYbDNnKvfWuQCGGcNX41QhPCg3UiSBbIEg/RgwI5nlIPQyIv0kj1IU1uwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFC4e3oBkDJ9IT3XdOcE+1scOB0oDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMzMGM3 ZjVjLWZhYWUtNDM1NC1iOTIwLWUyMGJkMDQyNWJiOS8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzMw YzdmNWMtZmFhZS00MzU0LWI5MjAtZTIwYmQwNDI1YmI5LzAvMkUxRURFODA2NDBD OUY0ODRGNzVERDM5QzEzRUQ2QzcwRTA3NEEwMy5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDSssw DQYJKoZIhvcNAQELBQADggEBAJ97rN6aBnZGt7bosn2EhV5fYbod4OPNAADnYAc4 3OHPT/gbRrvGpxANHnk53knUlDE5vaHOInIkajVIqlJu0bv3cCDjTbN6LyMW6uVx XNB5l+DWntY4C87/0XLIf7Pq5++Mzahf4SmrDr0t/l7XVp4Kd8qMzF1Zq6uA0vp5 V02vSK4f3FP/+zYjmL8TWlAxj+nD+5ITQxwrsn+oIhoG5QI0+ztdK0TPHHUcgL8C mjmNAm9lOUPP3dxwZvcdJd0ebkAh+2yQS59+nvKfkXLLYk8mXTiZwXcIYAEko59e JHQvxVRs4YU8GCeXzI9floxSXP0vwAVfBa4+hUtijblydIk= -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:42 2026 by rpki-client